Red Hat Bugzilla – Bug 1510142
Cannot ommit Compute->Containers->Containers from RBAC role.
Last modified: 2018-02-28 08:07:52 EST
Description of problem: When creating a new role, I cannot prevent the user from seeing Compute->Containters->Containers. There is no checkbox available for it. Version-Release number of selected component (if applicable): How reproducible: Always Steps to Reproduce: 1. Create a new role and try to prevent that role from accessing Compute->Containers->Containers Actual results: I did not see a checkbox available for controlling access to that page. Expected results: Additional info:
I was able to replicate this on 5.8.2.3. Any role that enables one more features under Compute -> Containers will display Compute -> Containers -> Containers by default. In 5.9.0.9, access to Containers is controlled by the product feature Compute -> Containers -> Containers Explorer
https://github.com/ManageIQ/manageiq/pull/16658
New commit detected on ManageIQ/manageiq/fine: https://github.com/ManageIQ/manageiq/commit/43c7b295c97cd5767d91dd561d6e67b3af646fcf commit 43c7b295c97cd5767d91dd561d6e67b3af646fcf Author: Harpreet Kataria <hkataria@redhat.com> AuthorDate: Wed Dec 13 09:59:40 2017 -0500 Commit: Harpreet Kataria <hkataria@redhat.com> CommitDate: Wed Dec 13 09:59:40 2017 -0500 Fixed product feature id for "Containers" This was causing Containers Explorer to be available when user's role had any of the other features access under Containers main tab. Due to the same "Containers Explorer" node was missing from User Role edit/details screen. Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1510142 db/fixtures/miq_product_features.yml | 2 +- db/fixtures/miq_shortcuts.yml | 2 +- db/fixtures/miq_user_roles.yml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-)
I could not reproduce the issue with 5.8.2.3.20171016155816_aaec796. I failed to have "Compute -> Containers -> Containers" displayed by adding any other feature under Conpute -> Containers. I can't see that feature in the tree and I can't see "Containers Explorer" feature either. Using 5.8.3.0.20171213193853_f1b4a89, I can see the "Containers Explorer" feature and user with this feature enabled can access Computer -> Containers -> Containers page. I can omit this feature successfully. Marking as verified in 5.8.3.0.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:0374